This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/hfYAMmC7nzj6eP_4KjmX0ydK61k.roa File: hfYAMmC7nzj6eP_4KjmX0ydK61k.roa (raw, json) Hash identifier: ENco3xJLaaDmCT3M7xz4xfUTyINJdjSu/7+AW54JdKY= Subject key identifier: 85:F6:00:32:60:BB:9F:38:FA:78:FF:F8:2A:39:97:D3:27:4A:EB:59 Certificate issuer: /CN=f1bd02ea44a9bee35b63d1ab3e25b14f19a35a55 Certificate serial: 019B7AC78C97E50AF3047FE2D74F3835ACC1 Authority key identifier: F1:BD:02:EA:44:A9:BE:E3:5B:63:D1:AB:3E:25:B1:4F:19:A3:5A:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/hfYAMmC7nzj6eP_4KjmX0ydK61k.roa Signing time: Thu 01 Jan 2026 18:17:36 +0000 ROA not before: Thu 01 Jan 2026 18:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204548 IP address blocks: 45.147.248.0/24 maxlen: 24 113.30.190.0/24 maxlen: 24 113.30.191.0/24 maxlen: 24 212.115.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:8c:97:e5:0a:f3:04:7f:e2:d7:4f:38:35:ac:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1bd02ea44a9bee35b63d1ab3e25b14f19a35a55 Validity Not Before: Jan 1 18:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=85f6003260bb9f38fa78fff82a3997d3274aeb59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ba:9f:5d:31:82:61:51:66:e6:3f:5e:4f:83: f5:34:b2:2e:c8:1f:ea:52:e2:98:fa:5f:93:0f:3f: 7e:9a:a3:f1:9b:7c:f7:fd:57:2e:de:21:b2:b0:73: ef:23:25:10:c7:d1:36:54:a2:ad:f8:6b:d6:a7:34: d3:2d:99:89:0d:45:30:d7:49:1b:ed:7b:77:fc:cd: b3:e6:ca:00:7a:df:e0:54:b7:36:2c:91:0f:c5:96: e8:e2:d1:57:40:48:ea:19:e4:a4:c6:67:04:72:ef: 9a:72:82:f7:31:83:4d:4e:6c:ee:83:89:51:9f:25: 56:4c:bf:05:de:ed:6f:1f:1a:fb:1a:d2:7b:a7:09: 90:0c:72:7a:8b:d3:91:ed:26:cb:a1:56:e8:77:4f: 2e:bf:d5:a3:93:c0:db:de:2e:30:a2:9e:e4:5e:c3: b8:60:8d:3c:cf:38:e8:ad:1b:7d:67:7a:2d:6b:50: 4e:ee:22:e7:7b:de:b0:52:d6:ed:48:d9:d7:5a:a1: 39:83:40:63:b9:19:52:66:bc:1f:64:f4:a2:75:16: 8b:2f:e7:8b:57:8b:0f:f0:38:e0:9b:93:55:c7:15: ed:3a:04:9c:54:75:0d:af:4f:d8:c1:c6:09:12:f7: d9:5c:96:04:0a:70:11:c5:ed:fb:51:29:c2:1b:fb: 06:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:F6:00:32:60:BB:9F:38:FA:78:FF:F8:2A:39:97:D3:27:4A:EB:59 X509v3 Authority Key Identifier: keyid:F1:BD:02:EA:44:A9:BE:E3:5B:63:D1:AB:3E:25:B1:4F:19:A3:5A:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/hfYAMmC7nzj6eP_4KjmX0ydK61k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.147.248.0/24 113.30.190.0/23 212.115.110.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:57:96:41:d8:f0:c9:4c:c9:b4:28:67:fd:94:e8:92:92:28: 62:27:46:66:f4:4f:2c:a4:3c:26:9d:da:44:d0:98:6d:42:36: 3a:1d:37:e5:2a:53:35:95:80:fd:7c:2c:60:2a:04:d3:fe:0b: c7:2f:61:a3:04:97:53:b7:1a:56:c8:56:d4:7f:69:85:87:33: 49:4c:a2:34:b6:83:d3:d7:a7:ef:af:22:5a:d3:30:ff:71:f0: bb:87:3f:52:5b:82:86:93:cb:c3:f9:bf:03:48:5b:de:24:2d: 16:23:80:b7:49:5a:e4:9d:da:5e:df:43:01:d5:00:53:be:65: 5d:49:a6:24:0f:59:85:17:b5:ab:ac:3c:00:e4:56:0f:0d:97: 31:2f:5c:64:ab:31:8d:ce:64:9f:2a:f4:cd:3f:fb:f5:a6:e7: 0c:bb:cf:6c:08:a0:c5:40:fd:e0:33:f9:57:d2:ad:47:07:c1: fd:37:ad:8c:61:ee:ea:fa:8b:31:37:f3:2a:0b:ac:07:a9:9d: 30:cd:74:91:2e:4e:ac:f6:5f:2f:f8:85:97:0b:7b:24:26:d3: 88:f7:3f:8e:47:93:e1:ac:27:52:5e:e1:f6:a5:cd:77:61:65: 5b:9b:be:9a:c0:f3:b9:c5:aa:c9:a2:24:15:c2:9c:99:cc:e5: b0:c9:6f:07 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt6x4yX5QrzBH/i1084NazBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxYmQwMmVhNDRhOWJlZTM1YjYzZDFhYjNlMjViMTRmMTlh MzVhNTUwHhcNMjYwMTAxMTgxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NWY2MDAzMjYwYmI5ZjM4ZmE3OGZmZjgyYTM5OTdkMzI3NGFlYjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7qfXTGCYVFm5j9eT4P1NLIuyB/q UuKY+l+TDz9+mqPxm3z3/Vcu3iGysHPvIyUQx9E2VKKt+GvWpzTTLZmJDUUw10kb 7Xt3/M2z5soAet/gVLc2LJEPxZbo4tFXQEjqGeSkxmcEcu+acoL3MYNNTmzug4lR nyVWTL8F3u1vHxr7GtJ7pwmQDHJ6i9OR7SbLoVbod08uv9Wjk8Db3i4wop7kXsO4 YI08zzjorRt9Z3ota1BO7iLne96wUtbtSNnXWqE5g0BjuRlSZrwfZPSidRaLL+eL V4sP8Djgm5NVxxXtOgScVHUNr0/YwcYJEvfZXJYECnARxe37USnCG/sGCQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFIX2ADJgu584+nj/+Co5l9MnSutZMB8GA1UdIwQY MBaAFPG9AupEqb7jW2PRqz4lsU8Zo1pVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGIwQzZrU3B2dU5iWTlHclBpV3hUeG1qV2xVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9iNjliYmEtNzIwMC00ZjUyLWI2MzEt ZmUwYTY1OGQ5ZGVkLzEvaGZZQU1tQzduemo2ZVBfNEtqbVgweWRLNjFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9iNjliYmEtNzIwMC00ZjUyLWI2MzEtZmUwYTY1OGQ5ZGVk LzEvOGIwQzZrU3B2dU5iWTlHclBpV3hUeG1qV2xVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALZP4AwQB cR6+AwQA1HNuMA0GCSqGSIb3DQEBCwUAA4IBAQBKV5ZB2PDJTMm0KGf9lOiSkihi J0Zm9E8spDwmndpE0JhtQjY6HTflKlM1lYD9fCxgKgTT/gvHL2GjBJdTtxpWyFbU f2mFhzNJTKI0toPT16fvryJa0zD/cfC7hz9SW4KGk8vD+b8DSFveJC0WI4C3SVrk ndpe30MB1QBTvmVdSaYkD1mFF7WrrDwA5FYPDZcxL1xkqzGNzmSfKvTNP/v1pucM u89sCKDFQP3gM/lX0q1HB8H9N62MYe7q+osxN/MqC6wHqZ0wzXSRLk6s9l8v+IWX C3skJtOI9z+OR5PhrCdSXuH2pc13YWVbm76awPO5xarJoiQVwpyZzOWwyW8H -----END CERTIFICATE-----Generated at Sun Jan 25 17:40:25 2026 by rpki-client